RE: Backdoor.sdbot trojan

From: Philip Bartholomew <Philip.Bartholomew(at)cms.co.uk>
Date: Tue Nov 12 2002 - 11:50:08 EST

Me too, thousands of them, for the past couple of weeks since Bugbear, I thought it was the aftermath no?

Philip Bartholomew

Network administrator: CmsWebView plc U.K (+44) 207 7020202
mailto:Philip.Bartholomew@CMS.co.uk

-----Original Message-----
From: candy [mailto:croakycb@suscom.net] Sent: 09 November 2002 02:19
To: focus-virus@lists.securityfocus.com
Subject: Re: Backdoor.sdbot trojan

I have had repeated attempt at my NetBios today; at least 200 today alone. It started this morning. The attempts that I have traced (not all for sure) have came in from Asia, primarily, but also from Canada. Does anyone have a clue what might be going on yet? Last time this type of activity was seen, it was finally reported that it was Bugbear with the worm attached to it.
Thanks
Croaky
Always remember you're unique. Just like everyone else ----- Original Message -----
From: "Rich Tourville" <richardt@andrew.cmu.edu> To: <focus-virus@lists.securityfocus.com> Sent: Tuesday, November 05, 2002 2:26 Candy Subject: Backdoor.sdbot trojan

> Have any of you folks on this list seen a re-occurrance of the
use
> computers here and this morning while doing a normal walk-thru I noticed
will
> open a backdoor on the infected machine through port 6667. It was first

---

This email has been scanned for all viruses by the MessageLabs SkyScan service. For more information on a proactive anti-virus service working around the clock, around the globe, visit http://www.messagelabs.com

---

Received on Tue Nov 12 14:24:13 2002